Assessment of information security literacy and its risk factors of disease control and prevention information system in Jinshan District / 上海预防医学

Objective:To assess the current situation of information security literacy， and determine its factors. Methods:Literature review and Delphi method were used to design a questionnaire on information security literacy. All users of disease control information system in Jinshan District，Shanghai were investigated. The questionnaire included information security related knowledge， awareness， role cognition， and behavior. Results:The overall proportion of information security literacy was determined to be 7.98%. Information security knowledge， awareness， role cognition， and behavior was identified in 17.18%， 37.42%， 62.58%， and 38.04% of the users， respectively. Sex， age and type of information system account were associated with the information security literacy. Conclusion:Information security literacy remains low in Jinshan District， which may not meet the current requirement in work. Particularly， information security behavior is at risk， which warrants further improvement in the information security management.

Current information security of blood banks in China / 中国输血杂志

【Objective】 To explore the current information construction and security status in blood banks in China though sampling. so as to provide feasible suggestions for strengthening security management. 【Methods】 The anonymous online questionnaire was issued to a total of 44 blood banks to investigate the information construction status, development of hierarchical protection work, security precautions at all levels of the information system, information operation and maintenance, and emergency response in these institutions. 【Results】 The average investment concerning information construction of 44 blood banks was 12.64 yuan per donor, with a median of 8.1 yuan. The investments of information security accounted for about 22.86% of the total investment, and the informatization construction investment was mainly concentrated in one-time project. The investment in infrastructure was basically equivalent to the that in the core business information system. The blood banks have paid more attention to the importance of information security. 【Conclusion】 Under the complicated situation of information security, the blood banks should further improve the frame work of information security systems and the management level of information security to secure a stable performance of key infrastructure and the privacy of blood donors and patients.